On 6/30/2003 at 7:53 PM isox wrote:
>There is a good paper written by Peter Gutmann titled "Secure Deletion
of
>Data from Magnetic and Solid-State Memory". It is nearly a decade
old,
>but it contains some very good information in it. It is available at
>http://www.cs.auckland.ac.nz/~pgut001/pub
On 6/30/2003 at 8:46 PM Benjamin A. Okopnik wrote:
>Well, I can't claim that I've actually seen a _documented_ recovery as
>such, or that I have *absolute* proof, but - having worked for
>$LARGE_AEROSPACE_COMPANY where this was a concern, I'm aware of two
>techniques that were supposedly in actual
On Fri, Jun 27, 2003 at 08:06:52PM -0700, Jack Crone wrote:
>
> If anyone on the list is aware of an actual, documented recovery I
> would really like to know about it. Demonstrations which show how to
> retrieve a few bits don't count. Neither do the claims of some data
> recovery companies who,
There is a good paper written by Peter Gutmann titled "Secure Deletion of Data from
Magnetic and Solid-State Memory". It is nearly a decade old, but it contains some
very good information in it. It is available at
http://www.cs.auckland.ac.nz/~pgut001/pubs/secure_del.html
sage-
From: Troy Larson [mailto:[EMAIL PROTECTED]
Sent: Friday, June 27, 2003 3:42 PM
To: Robinson, Sonja; 'NC Agent'; [EMAIL PROTECTED]
Subject: RE: Digital Evidence Question - What is an effective Windows hard
-disk search tool?
Sonja,
I would be very interested (actually, surpris
About fifteen years ago I was associated with a highly classified
military program. We had a very real need to know whether overwritten
data could be recovered and I believe we learned all that was known at
the time. We learned that it was theoretically possible to recover
data, but the theory had
7;; 'NC Agent'; [EMAIL PROTECTED]
> Subject: RE: Digital Evidence Question - What is an effective
> Windows hard -disk search tool?
>
>
> According to information I received at an HTCIA meeting about
> 3 months ago, as well as some reading that I have done, 31
> tim
---
From: Robinson, Sonja [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 9:01 AM
To: 'NC Agent'; [EMAIL PROTECTED]
Subject: RE: Digital Evidence Question - What is an effective Windows
hard -disk search tool?
>>O/S could be Fat32. We didn't have that info. True.
'NC Agent';
> [EMAIL PROTECTED]
> Subject: RE: Digital Evidence Question - What is an effective
> Windows hard -disk search tool?
>
>
> Greetings All,
>
> I really have to jump in in the middle of this one(threads
> included, for contextual refere
ursday, June 26, 2003 3:32 PM
To: Robinson, Sonja; 'NC Agent'; [EMAIL PROTECTED]
Subject: RE: Digital Evidence Question - What is an effective Windows hard
-disk search tool?
Sonja,
I respectfully take issue with only one statement: "A wipe to DoD specs (7
or more passes - 31 re
ROTECTED]
Sent: Thursday, June 26, 2003 9:01 AM
To: 'NC Agent'; [EMAIL PROTECTED]
Subject: RE: Digital Evidence Question - What is an effective Windows hard
-disk search tool?
>>O/S could be Fat32. We didn't have that info. True. Normal formats
still retain data in parts of
l Message-
From: Robinson, Sonja [mailto:[EMAIL PROTECTED]
Sent: Friday, June 20, 2003 10:50
To: 'Wilcox, Stephen'; '[EMAIL PROTECTED]'
Subject: RE: Digital Evidence Question - What is an effective Windows hard
-disk search tool?
If you reformatted, don't waste your mo
: 'Clayton Hoskinson'; 'Robinson, Sonja';
[EMAIL PROTECTED]
Subject: RE: Digital Evidence Question - What is an effective Windows
hard -disk search tool?
If the drive was formatted format c:/u the data is gone.
--
hard -disk search tool?
-Original Message-
From: Robinson, Sonja [mailto:[EMAIL PROTECTED]
Sent: Friday, June 20, 2003 10:50
To: 'Wilcox, Stephen'; '[EMAIL PROTECTED]'
Subject: RE: Digital Evidence Question - What is an effective Windows
hard
-disk search tool?
If you
-Original Message-
From: Robinson, Sonja [mailto:[EMAIL PROTECTED]
Sent: Friday, June 20, 2003 10:50
To: 'Wilcox, Stephen'; '[EMAIL PROTECTED]'
Subject: RE: Digital Evidence Question - What is an effective Windows hard
-disk search tool?
If you reformatted, don'
amework of high expectation."
Jack Kinder
-Original Message-
From: Robinson, Sonja [mailto:[EMAIL PROTECTED]
Sent: Monday, June 23, 2003 13:14
To: 'dave klimen'; 'Gene LeDuc'; '[EMAIL PROTECTED]'
Subject: RE: Digital Evidence Question - What is an effecti
nja Robinson, CISA
Network Security Analyst
HIP Health Plans
Office: 212-806-4125
Pager: 8884238615
-Original Message-----
From: dave klimen [mailto:[EMAIL PROTECTED]
Sent: Saturday, June 21, 2003 6:43 PM
To: Robinson, Sonja; 'Wilcox, Stephen'; [EMAIL PROTECTED];
'Gene LeDuc
EMAIL PROTECTED];
'Gene LeDuc'
Subject: RE: Digital Evidence Question - What is an effective Windows hard
-disk search tool?
Sonja,
That is so far from correct. With R-Studio $79
(http://www.r-tt.com/RStudio.shtml ), you can repartition, reformat (using
diff file systems) and still recover.
-
From: Robinson, Sonja [mailto:[EMAIL PROTECTED]
Sent: Friday, June 20, 2003 10:50
To: 'Wilcox, Stephen'; '[EMAIL PROTECTED]'
Subject: RE: Digital Evidence Question - What is an effective Windows hard
-disk search tool?
If you reformatted, don't waste your money on any
Raoul,
On 2003-06-19 Raoul Armfield wrote:
>> From: Gene LeDuc [mailto:[EMAIL PROTECTED]
>> Sent: Wednesday, June 18, 2003 6:20 PM
>>
>> If all you want to do is recover the info, you can attach the hard
>> drive to a linux box and mount the NTFS partition. From that point
>> you can browse the
]
Sent: Friday, June 20, 2003 1:20 PM
To: 'Gene LeDuc'
Cc: [EMAIL PROTECTED]
Subject: RE: Digital Evidence Question - What is an effective Windows
hard -disk search tool?
Since this is what I do for a living, security incident response handling
and computer forensic investigations, I am
OTECTED]
Subject: RE: Digital Evidence Question - What is an effective Windows hard
-disk search tool?
Since all you did was copy/paste from the web site, I think it's fair to ask
what your experience with this product has been.
-Original Message-
From: [EMAIL PROTECTED] [mail
ar Wiechers';
[EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: RE: Digital Evidence Question - What is an effective Windows
hard -disk search tool?
http://www.r-tt.com/RStudio.shtml
Host OS: Win9x, ME, NT, 2000, XP.
Remote data recovery over network. Data can be recovered on network
computers runni
To: [EMAIL PROTECTED]
Subject: RE: Digital Evidence Question - What is an effective Windows
hard -disk search tool?
:-Original Message-
:From: Gene LeDuc [mailto:[EMAIL PROTECTED]
:Sent: Wednesday, June 18, 2003 6:20 PM
:To: 'Wilcox, Stephen'
:Cc: [EMAIL PROTECTED]
:Subject: RE
hen [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 19, 2003 12:02 PM
To: Ansgar Wiechers; [EMAIL PROTECTED]
Subject: RE: Digital Evidence Question - What is an effective Windows hard
-disk search tool?
Do to the lack of knowledge and impatience I formatted the drive. I now
have looked at a couple re
Jim
-Original Message-
From: Ansgar Wiechers [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 18, 2003 7:50 PM
To: [EMAIL PROTECTED]
Subject: Re: Digital Evidence Question - What is an effective Windows
hard -disk search tool?
On 2003-06-18 Gene LeDuc wrote:
>> It funny that
2003 12:02
To: Ansgar Wiechers; [EMAIL PROTECTED]
Subject: RE: Digital Evidence Question - What is an effective Windows hard
-disk search tool?
Do to the lack of knowledge and impatience I formatted the drive. I now
have looked at a couple recovery tools out there but they run around $75..
ouch. I
:-Original Message-
:From: Gene LeDuc [mailto:[EMAIL PROTECTED]
:Sent: Wednesday, June 18, 2003 6:20 PM
:To: 'Wilcox, Stephen'
:Cc: [EMAIL PROTECTED]
:Subject: RE: Digital Evidence Question - What is an effective
:Windows hard -disk search tool?
:
:
:If all you want to do is r
-
From: Ansgar Wiechers [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 18, 2003 6:50 PM
To: [EMAIL PROTECTED]
Subject: Re: Digital Evidence Question - What is an effective Windows
hard -disk search tool?
On 2003-06-18 Gene LeDuc wrote:
>> It funny that this discussion started in the last fe
-4125
Pager: 8884238615
-Original Message-
From: Wilcox, Stephen [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 18, 2003 2:54 PM
To: [EMAIL PROTECTED]
Subject: RE: Digital Evidence Question - What is an effective Windows hard
-disk search tool?
Hello
It funny that this discussion st
Gene LeDuc; 'Wilcox, Stephen'
Cc: [EMAIL PROTECTED]
Subject: Re: Digital Evidence Question - What is an effective Windows hard
-disk search tool?
In a pinch you can use something like Knoppix, which will boot Linux from a
CD, assuming your bios is configured to allow for CD boot. This w
To: [EMAIL PROTECTED]
Subject: RE: Digital Evidence Question - What is an effective Windows hard
-disk search tool?
Hello
It funny that this discussion started in the last few days.. As Murphy
would have it, last night while installing a new nic card. Something
happened to the boot.ini file and c
On 2003-06-18 Gene LeDuc wrote:
>> It funny that this discussion started in the last few days.. As
>> Murphy would have it, last night while installing a new nic card.
>> Something happened to the boot.ini file and corrupted it. I don't
>> know how or why except the possibility of it writing to th
t; <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Wednesday, June 18, 2003 3:19 PM
Subject: RE: Digital Evidence Question - What is an effective Windows
hard -disk search tool?
> If all you want to do is recover the info, you can attach the hard drive
to
> a linux box and mount the N
EMAIL PROTECTED]
Subject: RE: Digital Evidence Question - What is an effective Windows
hard -disk search tool?
Hello
It funny that this discussion started in the last few days.. As Murphy
would have it, last night while installing a new nic card. Something
happened to the boot.ini file and corrupted
ient.
>
> Did you ever notice how all of your e-mail is 1K even if it is blank, yes MS
> dumps info in there too but it is generally invisible unless you do
> analysis. It's amazing what you can find....
>
>
>
>
> Sonja Robinson, CISA
> Network Security Analyst
> HIP H
st
HIP Health Plans
Office: 212-806-4125
Pager: 8884238615
-Original Message-----
From: marcus peddle [mailto:[EMAIL PROTECTED]
Sent: Monday, June 16, 2003 8:12 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Digital Evidence Question - What is an effective Windows hard-disk
search
ns
Office: 212-806-4125
Pager: 8884238615
-Original Message-----
From: marcus peddle [mailto:[EMAIL PROTECTED]
Sent: Monday, June 16, 2003 8:12 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Digital Evidence Question - What is an effective Windows hard-disk
search tool?
Hello,
238615
-Original Message-
From: marcus peddle [mailto:[EMAIL PROTECTED]
Sent: Monday, June 16, 2003 8:12 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Digital Evidence Question - What is an effective Windows hard-disk
search tool?
Hello,
I have a question/request:
A few wee
TED]
Cc: [EMAIL PROTECTED]
Subject: Digital Evidence Question - What is an effective Windows hard-disk
search tool?
Hello,
I have a question/request:
A few weeks back, a friend of mine in law enforcement
demo'ed a tool he had on is computer that searched his
entire hard drive and built an evid
: Monday, June 16, 2003 8:12 PM
Subject: Digital Evidence Question - What is an effective Windows hard-disk
search tool?
> Hello,
>
> I have a question/request:
>
> A few weeks back, a friend of mine in law enforcement
> demo'ed a tool he had on is computer that searched his
Hello marcus,
Monday, June 16, 2003, 6:12:29 PM, you wrote:
mp> -A tool (peferably freeware) that I can use to acquire
mp> and search my hard drive for
mp> images/history/general/etc information that I have
mp> "deleted".
While not a direct answer to your question, it makes for some good
readin
Hello,
I have a question/request:
A few weeks back, a friend of mine in law enforcement
demo'ed a tool he had on is computer that searched his
entire hard drive and built an evidence file (he
called it acquiring the drive). He then used a
propritarty tool to search the file the tool built for
43 matches
Mail list logo
